CVE-2011-5163

Buffer overflow in an unspecified third-party component in the Batch module for Schneider Electric CitectSCADA before 7.20 and Mitsubishi MX4 SCADA before 7.20 allows local users to execute arbitrary code via a long string in a login sequence.

🔗 References (14)

• cve@mitrehttp://secunia.com/advisories/46779
• cve@mitrehttp://secunia.com/advisories/46786
• cve@mitrehttp://www.citect.com/citectscada-batch
• cve@mitrehttp://www.osvdb.org/76937
• cve@mitrehttp://www.securitytracker.com/id?1026306
• cve@mitrehttp://www.us-cert.gov/control_systems/pdf/ICSA-11-279-02.pdf
• cve@mitrehttps://my.mitsubishi-automation.com/downloads_show.php?portal_id=1&doc_type=safety&scat=2&sstr=MX4%2CSCADA
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/46779
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/46786
• af854a3a-2127-422b-91ae-364da2661108http://www.citect.com/citectscada-batch
• af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/76937
• af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1026306
• af854a3a-2127-422b-91ae-364da2661108http://www.us-cert.gov/control_systems/pdf/ICSA-11-279-02.pdf
• af854a3a-2127-422b-91ae-364da2661108https://my.mitsubishi-automation.com/downloads_show.php?portal_id=1&doc_type=safety&scat=2&sstr=MX4%2CSCADA